The list of Windows Updates is usually wrong in app/platform layers and published images/desktops

The list of Windows Updates is usually wrong in app/platform layers and published images/desktops

book

Article ID: CTX226984

calendar_today

Updated On:

Description

The Windows Update history is correct only in the layer where the updates were actually installed.  So you can only rely on the displayed list of Windows Updates when you are editing the OS layer, because Windows Updates must always be installed in the OS Layer.  Similarly, you can only rely on the list of MS Office updates when editing the Office layer.  Looking at any other layer or at any published image, the list of Windows updates is likely to be wrong.

You should ignore the Windows Update history layers and images. The Update history list is just a table of updates that have been applied.  The existence or absence of a particular record in that table does not actually reflect the presence of the update itself.  Updates replace files in the filesystem, and those files were still replaced.

The table you see in an individual layer is based on the version of the OS layer that the app/platform layer was originally created on.  Adding a version to the layer base on a later OS version does not update that list.  So when you look at the list of updates in an app/platform layer, you usually see the list from the original version of your OS layer.  With Office, you may also see Office updates listed.  In the Office layer itself, the Office updates will be correct, since they were installed in the layer, but the Windows updates will not be. 

The table you see in a desktop or published image is mostly coming from the last app layer (the most recently created one) or the platform layer.  If that layer was made with a previous OS version, it may contain the list of Windows updates from that OS version rather than the current OS or the OS it was last edited with. When the OS is updated, the app layer still has the old table.

If you look at the actual files, though, you will find that the contents of the disk reflect all the Windows updates regardless of that list.

Issue/Introduction

When looking at a layer in the Install Machine or at a desktop or a published image, the list of Windows Updates is wrong. It does not include the most recent Windows updates in the OS layer or the most recent Office updates from the Office layer. This may cause concern in a security audit.